Support for authorizing VSTS in Azure Key Vault task

[Mardoxx]

Would be nice to have ACL for selected keyvault auto provisioned.

Have to do this workaround, adding SP manually failed every time because I don't know what I'm doing and documentation is sparse at best!!
Please see https://stackoverflow.com/questions/50968613/cannot-acces-keyvault-secrets-through-service-endpoint-in-a-vsts-release/51931131#51931131

[Lovakumar]

@Mardoxx provisioning of ACL for selected key vault needs user authentication hence it needs to go through user interaction flow only.

[Mardoxx]

Why have you closed this? :( Currently there is no way to auth vsts with the kv within the task

…

On Tue, 21 Aug 2018, 12:34 Lova Kumar Katikala, ***@***.***> wrote: Closed #8073 <#8073>. — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub <#8073 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AAOoMbD9IaHORF65zATlOjOk3ryX_quHks5uS_BTgaJpZM4WD7_a> .

[Lovakumar]

@Mardoxx Link that you shared and issue description sounded like you are looking for auto provisioning of ACL in key vault variable group.

If you are looking for similar thing in Azure Key Vault task, we currently generate a scrip as part of the task logs that you can run to provision ACL.

Inline support in task (similar variable group) is not in our backlog yet. Can you please try using the script generated by task. If that is not helping then we can add inline support for auto provisioning ACL in our backlog.

[Mardoxx]

Sorry should have been more clear!! Digging through logs only after pipeline has failed is not great imo. Inline Auth in task would be perfect!

…

On Tue, 21 Aug 2018, 13:33 Lova Kumar Katikala, ***@***.***> wrote: Reopened #8073 <#8073>. — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub <#8073 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AAOoMU81wU62DGGZDg7YnV7Yx7F00WsSks5uS_4fgaJpZM4WD7_a> .

[Lovakumar]

Ok got it. @N-Usha @RoopeshNair can you please add this feature to our backlog.

[N-Usha]

Added to the backlog and will update as we make progress in addressing it. Thanks!

[dazinator]

No news on this?

[dazinator]

• I'm using the task from Azure Devops, and hit Azure Devops - Key Vault task - Specified service connection needs to have x y z #10274

[leantk]

This issue is stale because it has been open for a year with no activity. Remove the stale label or comment on the issue otherwise this will be closed in 5 days

[github-actions]

This issue is stale because it has been open for 180 days with no activity. Remove the stale label or comment on the issue otherwise this will be closed in 5 days

[dazinator]

#dontclose

[github-actions]

This issue is stale because it has been open for 180 days with no activity. Remove the stale label or comment on the issue otherwise this will be closed in 5 days